CVE-2025-0282: Ivanti Connect Secure - Stack-based Buffer Overflow

1. In CISA KEVCISA KEV catalogue8 Jan 2025
2. Exploited (reported): not seen
3. Scanning observed: not seen
4. Proof of concept public: not seen
5. Not established: not seen

DescriptionCVE.org

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

• Ivanti · Connect Securefrom 22.7R2 up to and including 22.7R2.4
• Ivanti · Policy Securefrom 22.7R1 up to and including 22.7R1.2
• Ivanti · Neurons for ZTA gatewaysfrom 22.7R2 up to and including 22.7R2.3

Exploitation

Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalogue.

CISA KEV

Listed since 8 Jan 2025 · known ransomware use · catalogue entry

Public check

Ivanti Connect Secure - Stack-based Buffer Overflow · nuclei template in projectdiscovery/nuclei-templates

Weakness

Stack-based Buffer Overflow · Memory Corruption

Vendor

Ivanti

Published

January 2025

Band

Exploited in the wild, January 2025

1. 5 Nov
   CISA’s KEV entry now notes known ransomware use CISA
2. 8 Jan 2025
   CISA added it to the KEV catalogue CISA

• NVD entrynvd.nist.gov
• CISA KEV cataloguecisa.gov
• CVE recordcve.org
• Weakness CWE-121cwe.mitre.org
• forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secforums.ivanti.com
• Third-party advisorylabs.watchtowr.com
• Government resourcecisa.gov
• Exploitgithub.com
• cisa.gov/cisa-mitigation-instructions-cve-2025-0282cisa.gov
• cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-cloud.google.com